01Resources
Technical thinking for the systems that matter.
Practical perspectives across cybersecurity, AI, software, cloud, IT, OT and security engineering. Plainly written, and nothing is gated.
- Published
- 12 pieces across 10 topics
- Latest
- September 20, 2026
- Written by
- Onion Infosec Editorial
03Explore resources
One library, built to grow.
A resource type opens here when its first piece is ready, not before.
04Latest
Latest from Onion Infosec.
- Read article
Building a practical cloud security monitoring strategy
A practical order of work for cloud security monitoring on AWS, Azure and Google Cloud, from control plane logs to detections, cost control and response.
- Read article
Detection engineering: turning security telemetry into action
How to run detections as code, from an ATT&CK hypothesis through a tested KQL rule to tuning and analyst notes, with a worked Microsoft Sentinel example.
- Read article
From VAPT findings to continuous security improvement
How to read a VAPT report, prioritize with CVSS, EPSS and CISA KEV, fix root causes, and feed findings into development, detection and the next test.
- Read article
OAuth abuse and modern identity threats
How attackers get past MFA by stealing tokens and abusing OAuth consent in Microsoft Entra ID, which logs record it and how to respond when it happens.
Security Labs
Looking for deeper technical research?
Resources are practical and editorial. Security Labs is where the underlying research happens: threat research, detection engineering, AI security and vulnerability research.